FinQuery names Ryan Grace as CRO. As the company accelerates its expansion into debt and fixed asset accounting, the market leader taps a $1B-exit veteran to scale its multi-product growth Redação Portal ERP Jul 30, 2026 T | Fonte: 18px FinQuery announced the appointment of Ryan Grace as Chief Revenue Officer. In his new role, Grace will oversee go-to-market strategy as the company expands its AI-powered subledger Platform, the system of record for corporate financial obligations and capital assets, including leases, fixed assets, debt and accruals. The strategic addition comes as FinQuery accelerates its product roadmap to support corporate accounting and finance teams across a wider spectrum of complex balance sheet requirements. Grace will lead commercial execution as the company scales its multi-product Platform to capture broader market share. Grace joins FinQuery following three and a half years as CRO at A-LIGN, where he built the high-velocity revenue organization that culminated in the company's $1B+ exit to Hg Capital in 2025. Over his career, Grace has specialized in scaling multi-product revenue operations and turning partnership ecosystems into primary growth engines, including playing a key role in HERO's acquisition by Klarna. "FinQuery has built an incredible foundation of customer trust by solving some of the most complex challenges in accounting," said Joe Schab, CEO of FinQuery. "As we continue to accelerate our product roadmap and deliver broader value to our clients, we need a revenue leader who knows how to scale multi-product organizations. Ryan has proven time and again that he knows how to capture market share at this exact stage of growth." Grace's appointment comes during a period of significant corporate momentum. Following a majority growth investment from TA Associates, the company has strategically built out its executive bench, recently adding Chief Marketing Officer Jake Fabbri and SVP of Customer Success Mike Gerson. "I'm joining FinQuery at a true inflection point - the kind of moment where a team can multiply its impact," said Ryan Grace, newly appointed CRO. "FinQuery has earned something most tech companies never achieve: genuine customer trust. That trust is our permission slip for what comes next. Leases were the wedge; total financial obligations are the market. My job is to build a go-to-market engine that matches the massive ambition of our product portfolio, ensuring our existing customers continue to feel flawlessly served while we move fast." Redação Portal ERP. Editorial Team

Kiteworks and A-LIGN partner to strengthen cybersecurity across the Defense Industrial Base. Partnership helps organizations protect sensitive data, strengthen cyber resilience, and prepare for evolving compliance requirements, including CMMC 2.0. San Mateo, California | July 22, 2026 Kiteworks, which empowers organizations to effectively manage risk in every send, share, receive, and use of private data, today announced a strategic partnership with A-LIGN, a leading CMMC Third Party Assessor Organization (C3PAO), to help Defense Industrial Base (DIB) organizations strengthen their cybersecurity posture and navigate the path to CMMC 2.0 Level 2 certification. The Department of War suspended CMMC Phase II on July 13, 2026, and launched a 60-day review of the program, but the underlying responsibility has not changed: Phase I self-assessment requirements and DFARS 252.204-7012 obligations remain fully in force. The DoW has been explicit that it is reducing red tape, not cybersecurity expectations. Protecting the Controlled Unclassified Information handled by tens of thousands of DIB organizations remains essential to defending the supply chain against increasingly sophisticated threats. The Kiteworks and A-LIGN partnership is built around a shared goal of helping DIB contractors protect that data, whether they are beginning to build out their data exchange controls or already in the assessment process and stalled on control gaps or evidence deficiencies. Organizations deploy the Kiteworks Control Plane to implement a substantial majority of CMMC Level 2 requirements out of the box, covering domains that commonly surface as evidence gaps in third-party assessments. Then, they can separately engage A-LIGN to independently assess that evidence through its rigorous assessment process. A-LIGN's role in this partnership is limited to independent assessment: A-LIGN does not consult, remediate, or advise on control implementation, and DIB organizations remain free to engage any authorized or accredited C3PAO. Kiteworks is FedRAMP High In Process and FedRAMP Moderate Authorized, with nine consecutive years of annual 3PAO audits validating 325 NIST 800-53 controls since 2017. The platform is FIPS 140-3 validated and deploys as a hardened single-tenant virtual appliance, eliminating the CUI isolation failures that are among the most common reasons DIB organizations require remediation cycles before earning CMMC certification. In addition, Kiteworks supports Hold Your Own Key (HYOK) encryption, giving DIB customers full ownership of their cryptographic keys and reducing audit scope and third-party exposure. "Protecting the DIB was never about a single deadline, but rather about building data security practices durable enough to hold up no matter how the compliance timeline evolves," said Kurt Michael, Chief Revenue Officer, Kiteworks. "Kiteworks and A-LIGN share that same vision. Through our partnership, Kiteworks helps organizations put comprehensive controls at the data layer, and A-LIGN, a top C3PAO, brings the experience and rigor to help validate that work through independent assessment. Whether an organization is early in the process or already underway, Kiteworks helps them get the right controls in place so they can walk into the assessment room prepared." A-LIGN is one of the leading C3PAOs in the market and has conducted nearly 100 CMMC Level 2 assessments across DIB organizations of every size. The firm's assessors cover the full scope of CMMC Level 2, including the governance, personnel, physical, and organizational controls. Beyond CMMC, A-LIGN is also one of the top three FedRAMP assessors, with a team of auditors with deep, firsthand familiarity with how federal agencies expect compliance evidence to be documented and defended. "There's some uncertainty right now about when, and in what form, CMMC's third-party assessment requirements will return from the Department's review, but the underlying requirements haven't gone anywhere," said Nicholas Ludy, Chief Growth Officer, A-LIGN. "The commitment to securing the DIB doesn't hinge on any single implementation date. As CMMC requirements evolve, Kiteworks will keep giving DIB organizations a practical path to stronger data security and audit readiness, and A-LIGN will continue to deliver rigorous, independent assessments, so organizations are prepared whenever the certification timeline is finalized." About Kiteworks Kiteworks' mission is to empower organizations to effectively manage risk in every send, share, receive, and use of private data. The Kiteworks platform provides customers with a secure data exchange that delivers data governance, compliance, and protection in a unified control plane. Kiteworks unifies, tracks, controls, and secures sensitive data moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all private data exchanges. Headquartered in Silicon Valley, Kiteworks protects over 100 million end-users and thousands of global enterprises and government agencies. About A-LIGN A-LIGN is the leading cybersecurity compliance partner, trusted by over 6,400 organizations worldwide to navigate the complexities of compliance, audit, and risk. With a tech-enabled delivery model and deep domain expertise, A-LIGN has completed more than 36,000 audits. It is the #1 issuer of SOC 2 reports and a top three FedRAMP assessor. Founded in 2009, A-LIGN delivers high-quality, efficient audits across frameworks including SOC 2, ISO 27001, FedRAMP, CMMC, ISO 42001, PCI, and HITRUST. To learn more, visit: https://www.a-lign.com. Additional Resources A-LIGN's recognition of this partnership does not constitute or imply partiality in its assessment activities. As a CMMC Third-Party Assessment Organization (C3PAO), A-LIGN applies the same rigor, scrutiny, and standardized processes to all assessments regardless of an organization's RPO affiliation, technology platform, or partner status. A-LIGN maintains a diverse portfolio of partnerships expressly to prevent any single relationship from creating dependencies that could impair its professional judgment, objectivity, or independence. All assessments are conducted in strict accordance with CMMC assessment guidelines and its impartiality obligations. A-LIGN provides assessment services only. It does not consult, remediate, or advise on control implementation; CMMC certification outcomes are determined solely by independent evaluation of evidence against 32 CFR Part 170 and NIST SP 800-171; and DIB organizations may engage any Authorized or Accredited C3PAO. Get started. It's easy to start ensuring regulatory compliance and effectively managing risk with Kiteworks. Join the thousands of organizations who are confident in how they exchange private data between people, machines, and systems. Get started today.

Optro, formerly AuditBoard, has partnered with Crowe and A-LIGN to provide an end-to-end solution for organisations seeking Cybersecurity Maturity Model Certification (CMMC) ahead of the November 2026 deadline. Without certification, organisations cannot contract with the US Department of Defense. The solution creates a coordinated ecosystem where Crowe helps interpret requirements and build compliance programmes, Optro enables implementation through its AI-powered GRC platform, and A-LIGN conducts official assessments. The partnership aims to help thousands of organisations currently contracting with the Department of Defense meet the certification requirements. Optro serves more than 50% of the Fortune 500 and was named a Leader in Gartner's 2025 Magic Quadrant for GRC Tools.